Cybersecurity and Compliance
The evidence ready before anyone asks.
Access, incidents and controls documented for NIS2, GDPR and ISO 27001. Certification stays with the auditor.
See how it would work for you. First conversation free of charge; reply within 1 working day.
What we do
What we deliver, and in what form.
Access inventory, door by door.
Who gets in where, with which permissions and why. The extra doors close and the change is logged.
An incident log you can actually read.
What happened, when, who handled it and what changed afterwards. Ready for notification when the law requires it.
Control map, requirement by requirement.
Each requirement of NIS2, GDPR or ISO 27001 linked to the control that meets it and the evidence that proves it.
Policies in the team's own language.
Short policies, each with an owner and a review date. The team reads them, applies them and knows who to ask.
How, and within which limits
Control before scale.
We start with the inventory, not the standard.
First what exists: systems, access, data and suppliers. The standard comes afterwards, applied to that list.
The evidence is yours.
It stays in your system, in open formats, with access for the auditor you choose.
Certification stays with the auditor.
We prepare the evidence and the controls. Certifying is the work of a competent body; nobody becomes compliant by working with us.
Not a substitute for your lawyer.
We say what the standard requires in practice and what we do. The legal reading of your case belongs to whoever advises you on law.
The four standards
What each standard requires, and what only an auditor can declare.
Each page sets out what the standard asks, what Velqory does and where our role ends.
GDPR
Separation between commercial data, client-environment data and data processed on behalf of clients.
SeeNIS2
Risk, governance, incidents and supply chain, with a documented trail.
SeeISO 27001
Technical and documentary preparation of evidence, controls and management.
SeeSOC 2
Evidence for security, availability, confidentiality and processing integrity.
See
In context
See cybersecurity in a working day in your sector.
Fictional data. Browse freely, no sign-up.
Questions
Questions about cybersecurity, before the first conversation.
Does Velqory certify ISO 27001 or SOC 2?
No. Velqory is not ISO 27001 certified and not SOC 2 attested. We prepare the evidence and the controls; certifying or attesting is the work of a competent body, and no client becomes compliant by working with us.
Does NIS2 apply to my company?
That answer is a legal analysis, which Velqory does not replace. We say what the standard requires in practice and what we do; the legal reading of your case belongs to whoever advises you on law.
What does «evidence ready» mean?
It is what an auditor usually asks for, already gathered: an access inventory, an incident log and a map linking the relevant requirements of NIS2, GDPR or ISO 27001 to the control and the proof. It stays in your system, in open formats, with access for the auditor you choose.
Can you help us answer a security questionnaire from one of our clients?
Yes. The access inventory, incident log and control map we prepare with you are the basis for the answers. The answers and the final decision stay with your company; we do not guarantee the outcome of the assessment, and certification stays with the auditor. For questionnaires about Velqory itself as a supplier, see How we operate.
When do I know the price?
Before any work starts. After the scoping conversation we send a written proposal with the work, the assumptions, the timeline and a fixed price. The first conversation is free of charge.
Want to see this working for you?
See how it would work for you. First conversation free of charge; reply within 1 working day.
First step
Tell us where work gets stuck.
First conversation free of charge. Reply within 1 working day. Scope and price in writing before any work.